Comment 18 for bug 1552241

A second device to add which would be in:
/run/udev/data/c189:134
But only allow the first device in the apparmor rules.
Only if that would trigger a deny on the second attach it would help to add the second rule later.
And it does not show up, so a new rule on the second attach would not have helped.

Maybe libusb tries to be smart and only rescan if devices where plugged/unplugged.
So I retested
1. second device physically detached
2. attach first device to guest
3. attach second device physically to machine
4. attach second device to guest

Still no re-read.
So there is a qemu issue related to all of it that libusb context would have to be refreshed.
Until that is fixed we can only go for ther static rules.

Need to spawn a few discussions in both upstreams about that.

P.S. the [1] of comment #16 should have been:
[1]: http://elixir.free-electrons.com/linux/latest/source/Documentation/admin-guide/devices.txt